stokito commented on issue #13393:
URL: https://github.com/apache/maven/issues/13393#issuecomment-6470860985

   > sure, we could configure Etags but there is no need for those and they 
just add complexity when time-modified caching was/is working fine.
   
   Yes, and this is exactly why the ETag was introduced initially (but in fact 
that was just another "cookie" for tracking and mass surveillance). The time of 
files is also not stable: you may have a changed file's `mtime` (modified time) 
but no content changes. I agree that this is a breaking change, but chances was 
too low because all web servers for decade have ETag. The only way to fix that 
is to make adjustments in assets packaging.
   
   > I think 1 Feb 1980 TS is "lowest DOS" timestamp (so is kinda portable)
   The lowest ZIP epoch is 1 Jan 1980 but then it would be difficult to 
distinguish from absence of date so the next month, 1 Feb was taken as a 
reproducible date. 
https://github.com/apache/maven/commit/989f798c9fe61e87ef076af5e2cf8ccc48bbd6c7
   
   This change was breaking but in name of a better security.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to